The Data Export functionality under Data Management supports the exporting of all data records inside of Salesforce as frequently as Weekly (this is Monthly in the free Developer accounts). Scheduled Reports can be scheduled, but this would be for only one object and would not encompass all Salesforce data. The Force.com IDE is a tool that can export metadata (in other words, the settings, configuration, code, etc. of a Salesforce instance) but cannot export the data records themselves. A common point of confusion is that of data vs. metadata. Consider metadata as those things you would administer and customize via the Setup menu in Salesforce, whereas data would be the individual records that are created by users from within the interface.

When creating or editing a Dashboard, you can select the Data Sources tab and select Reports or Visualforce Pages. You can also select S-Controls, which will likely not appear on your exam, since they are very old.

The Data Import Wizard can import Accounts, Contacts, Leads and Solutions, along with Custom Objects. It cannot import Cases, therefore the Data Loader will need to be used.

Both Profiles and Permission Sets have an Assigned Apps settings sections, which can be used to specify which apps are visible in the app menu. App permission can therefore be set at the Profile level, and also at the Permission Set level in Salesforce. Public Groups and the Role Hierarchy have to do with what records you have access to and not the Apps you have access to.

The Salesforce1 User designation on a User record is checked in order to automatically use the Salesforce1 mobile browser app when logging into Salesforce from a supported mobile browser. If you turn this option off on a user record, then the mobile browser is instead directed to the full Salesforce site, for that user. This setting is set on the user record and is not an assigned app designation, nor is it assigned via a Permission Set. Page Layout assignments also do not control the Salesforce1 mobile browser app displaying.

Date and Number formats vary, based on the Locale of the user.

The base-level of security is set at the Organization-Wide Default level (OWD). You can layer additional security settings on top of the OWDs in Salesforce to open up further access. The base of the Security Model in Salesforce should always be set at its most restrictive and then you open up access by way of Sharing Rules. Refer to https://help.salesforce.com/articleView?id=security_sharing_owd_about.htm&type=0&language=en_US&release=206.13 for more details.
This image below from the Guide for Sharing Architecture is also a helpful illustration
Refer to https://developer.salesforce.com/docs/atlas.en-us.dat.meta/dat/dat_components.htm

A Private Group in Chatter keeps the group activity hidden from view from users. Users can request access to a Private Chatter Group.

To edit a report in Salesforce Classic, you click the Customize button while viewing the actual report. You can also click the down arrow next to a report that appears in the list of all reports and select Customize. Please note that in Lightning Experience, you would click the Edit button.

Lookup fields link two objects together. You can link an object with itself (there is an exception to this - you cannot add a Lookup field to User on the User object, but will have to instead use a Hierarchical field for that scenario).
Hierarchical
A special lookup relationship available for only the user object. It lets users use a lookup field to associate one user with another that does not directly or indirectly refer to itself. For example, you can create a custom hierarchical relationship field to store each user's direct manager.
See https://help.salesforce.com/articleView?id=overview_of_custom_object_relationships.htm&type=5

If you see no history of log-in attempts for the user in their User Detail page, they are either entering the wrong username, or they are attempting to log in to an incorrect location. If they have locked themselves out of their account after multiple failed login attempts, you will see that in their User Detail page.

Each dashboard has a running user, whose security settings determine which data to display in the dashboard. Refer to https://help.salesforce.com/articleView?id=dashboards_select_running_user.htm&type=0&language=en_US&release=206.13 for more details.

The four available actions that can be performed from a workflow rule (either immediately, or time-based) are field update, outbound message, email alert and task creation. A validation rule does fire immediately when a record save is attempted, but it is not associated directly with a workflow rule.

Default Off does not hide the tab from view for a user and it will be visible to them if they click the + sign for All Tabs. Tab hidden effectively hides the tab from the user, even if they click + All Tabs.

Although the Data Import Wizard can be used to import Lead Records, the maximum number of records which it can import at one time is 50,000. For this scenario, you will want to use the Data Loader, which can handle up to 5 million records per import.